Hi, there is a valid reason that in Message 106019 Source and Destination Ports doesn't appear in PIX Syslog? There is another way to log src_port and dest_port for these refused connections? Many thanks Luca Here the Documentation: %PIX-4-106019: IP packet from src_addr to dest_addr, protocol protocol received from interface int_name deny by access-group acl_ID Explanation This message is logged when an IP packet is denied by the parameters you specified in the access list with the ID acl_ID. Action None required. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=8144&t=8144 -------------------------------------------------- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]